last executing test programs: 27.298313032s ago: executing program 2 (id=3): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 25.890252018s ago: executing program 2 (id=14): r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="0000000006000500"], 0x24}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80}}], 0x18}}], 0x4a, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x46) 10.791385981s ago: executing program 32 (id=14): r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="0000000006000500"], 0x24}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80}}], 0x18}}], 0x4a, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x46) 7.361904334s ago: executing program 1 (id=133): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r2 = fanotify_init(0x4, 0x101801) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x14) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000280)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000040), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) read$FUSE(r2, &(0x7f00000057c0)={0x2020}, 0x2020) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r5, 0x0) accept4$rose(r5, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 4.300385303s ago: executing program 1 (id=167): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11", 0x14}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10002, 0x0, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000300)=""/151) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.182002192s ago: executing program 1 (id=168): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0xd6c}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040001}, 0x20008000) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20004004) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x4c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x10) 4.111642132s ago: executing program 1 (id=171): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18060000000000000000000000000000181200868c86d9e982db7859549c7a0900", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r1, 0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}}, 0x10) 4.107964937s ago: executing program 1 (id=173): r0 = socket$packet(0x11, 0x3, 0x300) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)='hfsplus\x00', 0x204001, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00'}) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r0, &(0x7f0000000100)="3f031c000302140006001e00890000004a1b7880610cc945000088a800008100000081000000", 0x26, 0x1, &(0x7f0000000540)={0xc9, 0x8100, r2, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="8500800000000000000000000000400095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 4.051376971s ago: executing program 1 (id=174): syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr(r2, &(0x7f0000000540)=@known='user.incfs.id\x00', 0x0, 0x0, 0x3) setreuid(0x0, r1) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000100)=0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x20000, &(0x7f0000000140)={[{@redirect_dir_follow}, {@verity_off}, {@metacopy_off}, {@redirect_dir_off}, {@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_auto}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@permit_directio}, {@measure}, {@uid_eq={'uid', 0x3d, r3}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'mountinfo\x00'}}, {@appraise}]}) (async) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x20000, &(0x7f0000000140)={[{@redirect_dir_follow}, {@verity_off}, {@metacopy_off}, {@redirect_dir_off}, {@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_auto}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@permit_directio}, {@measure}, {@uid_eq={'uid', 0x3d, r3}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'mountinfo\x00'}}, {@appraise}]}) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x80}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0xd7}, @timestamp={0x44, 0x4, 0x0, 0x0, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x80}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0xd7}, @timestamp={0x44, 0x4, 0x0, 0x0, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_disconnect(r4) (async) syz_usb_disconnect(r4) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r9, &(0x7f00000003c0)={0x1d, r10, 0x0, {0x1, 0xf0}, 0xfe}, 0x18) setsockopt$sock_int(r9, 0x1, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r10, {0xfffd, 0xffff}, {0x1}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x88d0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) (async) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0x89, {}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "a8ed9837"}, 0xfff, 0x2, {0x0}, 0x5}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) syz_usb_disconnect(r6) (async) syz_usb_disconnect(r6) ppoll(&(0x7f0000000040)=[{r7, 0x1}, {r7, 0x200}, {r7, 0x8044}, {r7, 0x480}, {r7, 0x122}, {r7, 0x124b}], 0x6, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 3.121316425s ago: executing program 3 (id=188): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = geteuid() pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x20468, &(0x7f00000004c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@default_permissions}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x800}}, {@default_permissions}], [{@euid_gt={'euid>', 0xee01}}, {@measure}, {@smackfsroot={'smackfsroot', 0x3d, 'GPL\x00'}}, {@measure}, {@subj_user={'subj_user', 0x3d, 'GPL\x00'}}, {@dont_appraise}]}}) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)={[&(0x7f0000000340)='\x00']}) 2.951837415s ago: executing program 3 (id=189): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x3, 0x401, 0x6, 0x14, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x8, 0x0, {0xffffffffffffffff}, {0xee00}, 0x5, 0x8b}) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0400, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, r2, 0x10000}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000180)=0x1) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f00000001c0)={0x1, 0x0, {0x3, 0x0, 0x5, 0xfffffff7}}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r2, 0x4068aea3, &(0x7f0000000200)={0x9f, 0x0, 0x1}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x9}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000300)={r4, 0x10001}, 0x8) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000340)={0x54, 0x1, 0x7f, {0x7ff, 0x8}, {0x6, 0x4680}, @const={0x4, {0x7, 0x2, 0xffa0, 0x7}}}) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000380)) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000002480)={0x50, 0x0, r6, {0x7, 0x2b, 0x6, 0x600, 0x7, 0x8, 0xffffffff, 0x60000, 0x0, 0x0, 0x100, 0x80}}, 0x50) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002500)='/sys/power/freeze_filesystems', 0x8200, 0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000002540)={r4, 0x1}, &(0x7f0000002580)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000025c0)={r8, 0x2, 0x6, [0x4, 0x8, 0xb, 0x0, 0x4, 0x27]}, &(0x7f0000002600)=0x14) r10 = syz_open_dev$rtc(&(0x7f0000002640), 0x5b40, 0x20000) ioctl$RTC_IRQP_SET(r10, 0x4008700c, 0x1878) ioctl$KVM_CAP_VM_TYPES(r7, 0x4068aea3, &(0x7f0000002680)={0xeb, 0x0, 0x6}) r11 = openat(0xffffffffffffffff, &(0x7f0000002700)='./file0\x00', 0x181083, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002780)={&(0x7f0000002740)='alloc_extent_state\x00', r7, 0x0, 0x9}, 0x18) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f00000027c0)={r9, 0x200}, 0x8) getsockopt$sock_int(r11, 0x1, 0x2a, &(0x7f0000002800), &(0x7f0000002840)=0x4) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002880), 0x200140, 0x0) getpeername$l2tp6(r12, &(0x7f00000028c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000002900)=0x20) 2.946458754s ago: executing program 3 (id=191): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000005000000020000000000008e"], 0x0, 0x2d, 0x0, 0x1, 0xf}, 0x28) execve(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000000180)='\x88\x9a.\xaa\x8c\b\x99\xe5 \x19\xa6\x1c}g\xf5)P\x86\f\xba\xff\x8fS0\xd0/\xa2\x16\xc1?5\x9f&!\xfe?\xbe\x03\\\x94s\xf5\x1f\xaa\xd9\xfd2\xbc5y\x18#Qu\x85\xee-\xc0\xac\xa8\x93\x0eXds\xf3\xf6\x84\xca\"\xb8\x06\x8bM\xd4\xc5\x8c\xe1\x86\'@\x9f\x8f\xce\x85\xdf\xbb\xa2\x04Z\xbc:;\x00B\x85U\xf6\x9d\x9e_\x9f_\x9dD\t\xa6\xf6\xa9\xb2e\x92\xd0g\xb3\x01\xb77\x8eC}\x1d\x92\xa0\x85)\x0f\x1d\x7f\xd6\xd7\x0f\x8d\xea']}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000005000000020000000000008e"], 0x0, 0x2d, 0x0, 0x1, 0xf}, 0x28) (async) execve(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000000180)='\x88\x9a.\xaa\x8c\b\x99\xe5 \x19\xa6\x1c}g\xf5)P\x86\f\xba\xff\x8fS0\xd0/\xa2\x16\xc1?5\x9f&!\xfe?\xbe\x03\\\x94s\xf5\x1f\xaa\xd9\xfd2\xbc5y\x18#Qu\x85\xee-\xc0\xac\xa8\x93\x0eXds\xf3\xf6\x84\xca\"\xb8\x06\x8bM\xd4\xc5\x8c\xe1\x86\'@\x9f\x8f\xce\x85\xdf\xbb\xa2\x04Z\xbc:;\x00B\x85U\xf6\x9d\x9e_\x9f_\x9dD\t\xa6\xf6\xa9\xb2e\x92\xd0g\xb3\x01\xb77\x8eC}\x1d\x92\xa0\x85)\x0f\x1d\x7f\xd6\xd7\x0f\x8d\xea']}) (async) 2.862070736s ago: executing program 3 (id=192): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18800001000000000000000000ba27a5bd6fc79d", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x32}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000000000000c00000000140000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008000000000000000000000000000000000000000000000001300"], 0x50) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001a00010000000000000000008100800000000000000000001400010000000000000000000000ffff00000000cf69a3ed142ab9418098e6428828e0a6f9b04339b8653a2350735026ee8c2768143ef7546006c6ee6344b6df91a64a74084a8197ed20f43912"], 0x30}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000090900030073797a32000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c000180090001006d617371"], 0xbc}}, 0x4000040) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x4, 0xffff}}}, 0x24}}, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 2.857075582s ago: executing program 3 (id=194): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000a40)={@flat=@handle={0x73682a85, 0x1001}, @flat=@handle={0x73682a85, 0x0, 0x3}, @fda={0x66646185, 0x200a, 0x0, 0x35}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r7, 0x339, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x152) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) 1.95181299s ago: executing program 3 (id=201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c000280ffff129200000000cd6bb36678c5334bc2f1dd780b440e207d08bf0a311d675a76e21809be38481cf6c675a35d82b85eff68154e695a8cdec55d4b57400016562a65c9fc55413eaa6b11e6e106008355146a982640977f584e096046212884cbf5fe32e59da5e497ad4ac0dc54652c8553f1e59a05a5728ea11c2f90d49fc09e023a2533c9b436cfdd"], 0x3c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000bc0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3}) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000bc0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000140)=0x4, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000140)=0x4, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x339) socket$kcm(0x2, 0xa, 0x2) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r6], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x3f815cc665218f90) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r6], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x3f815cc665218f90) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x0, 0x50020000, 0x0, 0x98, 0x0, 0x168, 0x1f0, 0x1f0, 0x168, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @broadcast, 0xffffffff, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'sit0\x00', '\x00', {}, {}, 0xc}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], 0x0, 0x0, 0xffffffffffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) r8 = socket(0x10, 0x2, 0x0) r9 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000003c0)=ANY=[@ANYRES64=r5, @ANYRES32=r3], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r9) (async) syz_usb_disconnect(r9) syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[], 0x0) (async) syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[], 0x0) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f00000006c0)=0x4, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r8, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="14fd10983783d902f35304c0e4016dd38fb318e0a30c1a4a7b6de2b1282bc14d887fb2668890d537c0929d5c2962cf83959ee8b9d3372b7b39ccae2677b54a2a981949a597422c0d07e515e65874ec7752b8c790696c3bad75e7ba9ca3e78b113e8c83e6b6bd4ab0e6594ae318e232c001b1ac8cb1c828a59cae03000000c40081c277772d", @ANYRES16=r10, @ANYBLOB="04002abd7000fbdbdf257a00000008000300", @ANYRES32=r11, @ANYBLOB="0c009900000000000800000056002a006512c459aa0cf1b8ffffffffffffffffffffffff2d1a00800d03000000000000007f0004000c000000060001000000900006020202020202751800000b00791d12009d067d45d13288da9dc0d1eec8b135910000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r8, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="14fd10983783d902f35304c0e4016dd38fb318e0a30c1a4a7b6de2b1282bc14d887fb2668890d537c0929d5c2962cf83959ee8b9d3372b7b39ccae2677b54a2a981949a597422c0d07e515e65874ec7752b8c790696c3bad75e7ba9ca3e78b113e8c83e6b6bd4ab0e6594ae318e232c001b1ac8cb1c828a59cae03000000c40081c277772d", @ANYRES16=r10, @ANYBLOB="04002abd7000fbdbdf257a00000008000300", @ANYRES32=r11, @ANYBLOB="0c009900000000000800000056002a006512c459aa0cf1b8ffffffffffffffffffffffff2d1a00800d03000000000000007f0004000c000000060001000000900006020202020202751800000b00791d12009d067d45d13288da9dc0d1eec8b135910000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) openat$bsg(0xffffffffffffff9c, &(0x7f0000002540)='/dev/bsg/0:0:0:0\x00', 0x68780, 0x0) (async) r12 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002540)='/dev/bsg/0:0:0:0\x00', 0x68780, 0x0) ioctl$BSG_GET_COMMAND_Q(r12, 0x2270, &(0x7f0000002580)) (async) ioctl$BSG_GET_COMMAND_Q(r12, 0x2270, &(0x7f0000002580)) clock_gettime(0x0, &(0x7f0000000700)) (async) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r8, 0x28, 0x6, &(0x7f0000000680)={r13, r14/1000+60000}, 0x10) 1.170626734s ago: executing program 0 (id=205): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f0000000100)=0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x100, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x8040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0e1d6c77e161"}]}, 0x40}}, 0x0) (async) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x99, "275ca8d441943f86b3c9452b6bb76b181eb5817fe49a59588744c656a00da009ea97bd3ca3d5253979fabb1836ac04f7e584c943de5c92b82983389f24f307825bda52cf5cf1511cdeda89d322793e6d6b4aabf0116957fb53e0f84d6134128a3c694953be4f8eb09d17251c0d08a93e6774d7c1352ffdbe92f61f20d872f12a136488e4e07bc152db11b8246825dd67942577c5dce333f7fb"}, &(0x7f0000000200)=0xbd) 1.170430574s ago: executing program 0 (id=206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="33fa2abd7000fcdbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="140004006361696630000000020000000000000008000500060000000c001780060005"], 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000001080017"], 0x44}}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x50, 0x5, 0x0, "d02067046edd9a2ad5b4f84e56386c37290aa26c89983c3c0a31965ebd9ca8ac"}) 1.110703778s ago: executing program 0 (id=207): r0 = socket(0x200000000000011, 0x2, 0xd) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x16, 0x0, &(0x7f00007d0000)) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450000240000e0000011907800000000000000000300000000109078a20c000100000000"], 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$sock(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x4f, 0x594}}], 0x18}, 0x2404c8d5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x400000000000272, 0x0, 0x0) 262.00381ms ago: executing program 0 (id=212): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$CDROM_CLEAR_OPTIONS(r0, 0x5321, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000008c0)={0xc0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x501a80, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$CDROM_CLEAR_OPTIONS(r0, 0x5321, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000008c0)={0xc0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x501a80, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12) (async) 261.334451ms ago: executing program 4 (id=213): prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./file3\x00', &(0x7f00000003c0)='ocfs2\x00', 0x0, &(0x7f0000000300)='acl') 258.57962ms ago: executing program 0 (id=214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x40814) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@private2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f00000000c0)={0xf, 0x1, 0x0, "6040a7190200002000000000000000ff1057e31e94000000000000000006ff00", 0x42303159}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x40, &(0x7f0000000280)={[{@redirect_dir_off}, {@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_on}], [{@euid_eq={'euid', 0x3d, r5}}, {@uid_gt={'uid>', r6}}, {@dont_measure}]}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x40}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r11, 0x2201, 0x800}}, 0x20}}, 0x40040) 211.759374ms ago: executing program 4 (id=215): r0 = socket(0x26, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003800010329bd7000fadbdb2504"], 0x14}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000022", @ANYRES32=0x0, @ANYBLOB="10000000000000001c0012800b00010062726964676500000c0002800800030019000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 211.43054ms ago: executing program 4 (id=216): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040840}, 0x20044000) recvmmsg(r1, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/2, 0x2}], 0x1}, 0xfffffffc}], 0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x58fe7ab67a988db6}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040840}, 0x20044000) (async) recvmmsg(r1, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/2, 0x2}], 0x1}, 0xfffffffc}], 0x2, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x58fe7ab67a988db6}, 0x0) (async) 111.86233ms ago: executing program 4 (id=217): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000240012800900010069706970000000001400028005000900ff"], 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x4, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x40000) (async) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x4, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x40000) 109.162769ms ago: executing program 4 (id=218): mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x618008, &(0x7f0000000280)=ANY=[@ANYBLOB="6c1f96000030303030303030302a303030303030303030303030318dc200"]) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r1, &(0x7f00000008c0)='/', 0x1, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008000500000000000800060000020000080007"], 0x44}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x1, 0x0) fchdir(r5) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@volatile}]}) r6 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x400) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.722485ms ago: executing program 4 (id=219): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x2, 0x40000105, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) add_key(&(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000180)="6e0c9b6b38", 0x5, 0xffffffffffffffff) r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0x639) epoll_create1(0x80000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/block/loop0', 0x200200, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x4, r9, 0x0, 0x0, 'syz1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x31}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) read$FUSE(r7, &(0x7f0000000c00)={0x2020}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) pselect6(0x40, &(0x7f0000000100)={0x0, 0x200000008, 0x0, 0x4cb, 0x8, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x9, 0x0, 0x0, 0x10, 0x4}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ff"], 0x5c}, 0x1, 0x0, 0x0, 0x48814}, 0x4040800) close_range(r3, 0xffffffffffffffff, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xa, &(0x7f00000002c0)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000780)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000007c0)=0x40) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)='erofs\x00', 0x0, 0x0) 0s ago: executing program 0 (id=220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="01001000000000005e00000000000000440f704e0d85642e410f2167b930080000b871de0000ba000000000f30"], 0x5e}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x10000000000000, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r3, 0x101, 0x7, &(0x7f0000000000)=0x2, 0x4) setsockopt$ax25_int(r3, 0x101, 0x1, &(0x7f0000000040)=0x6, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0xc9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'pimreg0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000340)={'nat\x00', 0x0, [0x9, 0x8, 0x5, 0x4d1, 0x1]}, &(0x7f0000000180)=0x54) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x8, 0x4) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f0020a800000000000c0002000200000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 0s ago: executing program 4 (id=221): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) (async) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) write$UHID_CREATE2(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd00dc0035000000fbffffff0575ffff01000000abb15a18c44969e78820e4ce0eda98c8a0278987a81837457acbb44adcaea06a4d30603f4bf2e3ba55cb86bde456e5bb95de72c750a18f666b587dda7f36d67addec40d92aa22b3856679baf073aa26138e5af8d0939b3ede8a945d7ce60d58c9806252ef6e951c563feaebfe37e88d9bc4df20ec6d6a5afe91fb3ecc4649821b58587f4793137fba0619ff40b371761c23e99ba8dc0b97c3c14011607892ad175914a1e58f427bba01a122c65e8dbc8988dd3bc1bc89187dcdf9aeb44f500674017a71151c2dac1a03cad75e3abc5664463e184f7b6a03dce5e07fa34"], 0x1f5) (async, rerun: 32) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xdb) (async, rerun: 32) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000380)=0x2) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 64) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r5, 0x1, 0x70bd2b, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000d80)={0x5f4, r5, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0x4b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x96, 0x4, "7ec7e5bd37afca6384593c17261d5aa17589f2bdb0417a1a8a30da55c137fa37991dae1239070af51a075714e2c90429a6bad570c57ae57d785b6382c67d0cb9bf4bbaa86dee404aecb14ed8b2146bec8c769d25cef75bf219e2ad1e5b28c12946f9604ac47dd4a1e0d8472c48dc3c95bbecd05bb81382c63f06b24894c34674411fc7f7053a6af25f33235c6fd733209b6f"}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'U\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x12}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!\\+/\\@\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x1e0, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3883}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ':-/\'$&(%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'LOG\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{%{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '+\\/)\\\x05!.\x00'}]}, {0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x68}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\,^:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_to_bond\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}l\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$&,^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/vhost-net\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'LED\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'LOG\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.*\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\'#@,@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'icmp6\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '%\"+/}\\\'\xe6\\\\%{-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'raw\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa6, 0x4, "37ce1a9c3d0e606056357d3993d448aab92e4f69b3171d2031c61e7265ca656957dfb964ea79ca120f8b0e675ec2eb6b65efd1ff4dded8ed6172bad1aad80024c0be53c89f126adec43a238cfee63133a96823b0286af8e7a09238a6022b344c2f82efea53b57e9d0b827a5d34ad09b3c80f389a55b8193bc2d4cc932f28194ab7e122ae1d28a3bb4e303ecba8d9ab7fede1f00ac16d7b77dcb65d6d5023e1382899"}, @ETHTOOL_A_BITSET_VALUE={0xe6, 0x4, "c889a9ecac8fe18b80d2b8ca92849a38509322100d4aa8e59044466d5683f29be4ef3d6201db55e98e64169cbc57d117c9e060eef610b524f024221d525c0e9cb1a61ffaccae68fec99154d356fdd754167e0bd07fc2b3d33d23d4fa9c405505272d333d06bf2f474ddff103abd9230c411358ec6539675e934c36a27538d928f51a597557d0ab94712079f143a11c1dc71b02d1b156458752bbc4a6b529eee7746bb9c3e726e3b236ccd5c99a69e0e6cbf96129b487d0c4999390ed247e59602291771e5cb3ec721302dd98c9774b12b010a7f25d8321a9094e972d8115b1ba7770"}]}, @ETHTOOL_A_WOL_SOPASS={0xf, 0x3, "29d50bef50f661b874707f"}, @ETHTOOL_A_WOL_SOPASS={0x53, 0x3, "657246d083a3778ddebcfc80db984baf70e1c99e30e11650444a1c548083402a57fd850ffdef5b4aefa52479e4c593038c97e9e19e6a0a252ff4d5305386a0f29f64018132952163450d90db104520"}, @ETHTOOL_A_WOL_SOPASS={0xc2, 0x3, "0dab27a4cc1f2d782b1448d0fccf3ebec3b82e824eebecb6c9ef47a8fd3a5f0da79fb7e9ec0074d42a80fdaca42225ce8b3a8f6370ae574e2af3d80671e88306667cbd178b990ec2a06d7fd02bedc3b35e0b3713659dc9042c3c88c1216aa45f95fb8e9377c91b81516813d7fbca361b4832f5fefc3289f3e9fd4305419e8a264003dde9c11d4351cc66c811938a5b9ebe7706b449ee8699da4de50b5a02122d32426b2225e1b80aad51aa3b40eab48b1aedb75aa2b23a700333f1ba5d59"}]}, 0x5f4}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0xe8, 0x150, 0x150, 0x228, 0x0, 0x228, 0x238, 0x206, 0x228, 0x238, 0x7fffffe, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], 'veth0_to_bond\x00', 'xfrm0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x96, 0x8, "478c7b28498b0690ca4c256a8c89381faee2fc6e1724511e33dac4ddb0c1"}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x1}}, @common=@icmp6={{0x28}, {0x0, 'g\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x3d}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) (async) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0xfffffffe}, 0x8) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)="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", 0x1cf}], 0x1}}], 0x2, 0x24000890) (async) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r7, 0x8004af81, &(0x7f0000000080)) kernel console output (not intermixed with test programs): [ 38.105390][ T40] audit: type=1400 audit(1752023482.813:60): avc: denied { rlimitinh } for pid=5854 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.111419][ T40] audit: type=1400 audit(1752023482.813:61): avc: denied { siginh } for pid=5854 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:38865' (ED25519) to the list of known hosts. [ 39.004512][ T40] audit: type=1400 audit(1752023483.733:62): avc: denied { name_bind } for pid=5861 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.021861][ T40] audit: type=1400 audit(1752023483.743:63): avc: denied { write } for pid=5862 comm="sh" path="pipe:[3834]" dev="pipefs" ino=3834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.033536][ T40] audit: type=1400 audit(1752023483.763:64): avc: denied { execute } for pid=5862 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.040567][ T40] audit: type=1400 audit(1752023483.763:65): avc: denied { execute_no_trans } for pid=5862 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.114884][ T40] audit: type=1400 audit(1752023485.843:66): avc: denied { mounton } for pid=5862 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.117411][ T5862] cgroup: Unknown subsys name 'net' [ 41.257131][ T5862] cgroup: Unknown subsys name 'cpuset' [ 41.262357][ T5862] cgroup: Unknown subsys name 'rlimit' [ 41.468584][ T5885] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.159963][ T5862] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.046831][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 45.046845][ T40] audit: type=1400 audit(1752023489.773:80): avc: denied { execmem } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.236812][ T40] audit: type=1400 audit(1752023489.963:81): avc: denied { create } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.243326][ T40] audit: type=1400 audit(1752023489.963:82): avc: denied { read write } for pid=5946 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.250411][ T40] audit: type=1400 audit(1752023489.963:83): avc: denied { open } for pid=5946 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.260323][ T40] audit: type=1400 audit(1752023489.963:84): avc: denied { ioctl } for pid=5946 comm="syz-executor" path="socket:[3862]" dev="sockfs" ino=3862 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.276702][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.281371][ T5957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.284099][ T5957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.286613][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.286673][ T5957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.289425][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.291504][ T5957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.293649][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.298400][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.298423][ T5957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.301017][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.301864][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.302823][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.303174][ T5964] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.303942][ T5964] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.304750][ T5964] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.310613][ T5309] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.310926][ T40] audit: type=1400 audit(1752023490.033:85): avc: denied { read } for pid=5946 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.311455][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.311859][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.312123][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.332428][ T40] audit: type=1400 audit(1752023490.033:86): avc: denied { open } for pid=5946 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.339458][ T40] audit: type=1400 audit(1752023490.033:87): avc: denied { mounton } for pid=5946 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.519869][ T40] audit: type=1400 audit(1752023490.243:88): avc: denied { module_request } for pid=5946 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.550926][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 45.601371][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 45.632508][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 45.735737][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.739325][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.743498][ T5946] bridge_slave_0: entered allmulticast mode [ 45.746237][ T5946] bridge_slave_0: entered promiscuous mode [ 45.768395][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.771258][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.775030][ T5946] bridge_slave_1: entered allmulticast mode [ 45.778686][ T5946] bridge_slave_1: entered promiscuous mode [ 45.782313][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 45.872251][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.875345][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.878290][ T5959] bridge_slave_0: entered allmulticast mode [ 45.881967][ T5959] bridge_slave_0: entered promiscuous mode [ 45.886600][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.888819][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.891008][ T5959] bridge_slave_1: entered allmulticast mode [ 45.894301][ T5959] bridge_slave_1: entered promiscuous mode [ 45.917493][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.946399][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.948657][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.950845][ T5947] bridge_slave_0: entered allmulticast mode [ 45.954088][ T5947] bridge_slave_0: entered promiscuous mode [ 45.957843][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.978794][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.981181][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.984263][ T5947] bridge_slave_1: entered allmulticast mode [ 45.988099][ T5947] bridge_slave_1: entered promiscuous mode [ 46.024038][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.044826][ T5946] team0: Port device team_slave_0 added [ 46.048605][ T5946] team0: Port device team_slave_1 added [ 46.054753][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.152863][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.158192][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.161471][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.163820][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.171383][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.177086][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.179227][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.181441][ T5954] bridge_slave_0: entered allmulticast mode [ 46.184219][ T5954] bridge_slave_0: entered promiscuous mode [ 46.187327][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.189515][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.191702][ T5954] bridge_slave_1: entered allmulticast mode [ 46.194275][ T5954] bridge_slave_1: entered promiscuous mode [ 46.198248][ T5959] team0: Port device team_slave_0 added [ 46.231271][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.233773][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.241794][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.262427][ T5959] team0: Port device team_slave_1 added [ 46.266296][ T5947] team0: Port device team_slave_0 added [ 46.305477][ T5947] team0: Port device team_slave_1 added [ 46.322526][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.339406][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.341533][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.350034][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.368113][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.385511][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.387750][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.395692][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.399677][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.401779][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.410721][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.456145][ T5946] hsr_slave_0: entered promiscuous mode [ 46.459141][ T5946] hsr_slave_1: entered promiscuous mode [ 46.466448][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.468549][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.476365][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.504886][ T5954] team0: Port device team_slave_0 added [ 46.508470][ T5954] team0: Port device team_slave_1 added [ 46.594950][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.597241][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.605187][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.634922][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.637195][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.644988][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.681885][ T5959] hsr_slave_0: entered promiscuous mode [ 46.684880][ T5959] hsr_slave_1: entered promiscuous mode [ 46.686921][ T5959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.689375][ T5959] Cannot create hsr debugfs directory [ 46.699573][ T5947] hsr_slave_0: entered promiscuous mode [ 46.701894][ T5947] hsr_slave_1: entered promiscuous mode [ 46.704003][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.706543][ T5947] Cannot create hsr debugfs directory [ 46.837006][ T5954] hsr_slave_0: entered promiscuous mode [ 46.839247][ T5954] hsr_slave_1: entered promiscuous mode [ 46.841315][ T5954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.844653][ T5954] Cannot create hsr debugfs directory [ 47.039560][ T5946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.047521][ T5946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.052745][ T5946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.061428][ T5946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.087932][ T5959] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.092519][ T5959] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.096957][ T5959] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.101122][ T5959] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.139309][ T5947] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.143444][ T5947] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.147425][ T5947] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.151613][ T5947] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.206383][ T5954] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.211629][ T5954] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.216132][ T5954] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.220430][ T5954] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.238447][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.272296][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.290322][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.292678][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.301966][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.318353][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.320611][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.333687][ T5309] Bluetooth: hci1: command tx timeout [ 47.333758][ T5955] Bluetooth: hci2: command tx timeout [ 47.333769][ T5950] Bluetooth: hci0: command tx timeout [ 47.343392][ T5309] Bluetooth: hci3: command tx timeout [ 47.346352][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.358270][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.368143][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.370313][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.377219][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.379513][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.403806][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.416246][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.424927][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.427245][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.438260][ T40] audit: type=1400 audit(1752023492.163:89): avc: denied { sys_module } for pid=5946 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.444262][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.448542][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.462201][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.469528][ T5959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.491291][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.493538][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.505062][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.507380][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.528083][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.565729][ T5954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.587861][ T5946] veth0_vlan: entered promiscuous mode [ 47.596647][ T5946] veth1_vlan: entered promiscuous mode [ 47.620603][ T5946] veth0_macvtap: entered promiscuous mode [ 47.625725][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.629630][ T5946] veth1_macvtap: entered promiscuous mode [ 47.647707][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.655263][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.660563][ T5946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.664094][ T5946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.666787][ T5946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.669478][ T5946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.674629][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.695079][ T5959] veth0_vlan: entered promiscuous mode [ 47.704991][ T5959] veth1_vlan: entered promiscuous mode [ 47.710415][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.747188][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.749713][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.761744][ T5947] veth0_vlan: entered promiscuous mode [ 47.776451][ T5947] veth1_vlan: entered promiscuous mode [ 47.780772][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.784484][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.785387][ T5959] veth0_macvtap: entered promiscuous mode [ 47.796470][ T5959] veth1_macvtap: entered promiscuous mode [ 47.800269][ T5954] veth0_vlan: entered promiscuous mode [ 47.814005][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.818033][ T5947] veth0_macvtap: entered promiscuous mode [ 47.822867][ T5947] veth1_macvtap: entered promiscuous mode [ 47.828829][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.831853][ T5954] veth1_vlan: entered promiscuous mode [ 47.832501][ T5946] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.841134][ T5959] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.845002][ T5959] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.848065][ T5959] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.850635][ T5959] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.855338][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.859629][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.868801][ T5947] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.873279][ T5947] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.875924][ T5947] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.878801][ T5947] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.894918][ T5954] veth0_macvtap: entered promiscuous mode [ 47.900585][ T5954] veth1_macvtap: entered promiscuous mode [ 47.925589][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.948701][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.952351][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.952401][ T6035] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c0189378, magic 93 != 6b] [ 47.954701][ T5954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.954743][ T5954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.954767][ T5954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.954791][ T5954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.956270][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.988885][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.991585][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.005766][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.009143][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.021308][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.025386][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.041820][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.048767][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.076469][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.078925][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.166881][ T6046] syzkaller0: entered promiscuous mode [ 48.168643][ T6046] syzkaller0: entered allmulticast mode [ 48.353093][ T1328] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 48.511304][ T1328] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 48.515036][ T1328] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.519873][ T1328] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 48.524504][ T1328] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 48.529209][ T1328] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.535535][ T1328] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.539575][ T1328] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.553363][ T1328] usb 8-1: config 0 descriptor?? [ 48.558859][ T6040] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 48.967685][ T1328] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 48.977754][ T1328] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 49.004855][ T6062] binder: 6061:6062 unknown command 1919251317 [ 49.006988][ T6062] binder: 6061:6062 ioctl c0306201 200000000240 returned -22 [ 49.313376][ T6076] PID 6076 killed due to inadequate hugepage pool [ 49.333076][ T6027] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 49.413320][ T5955] Bluetooth: hci2: command tx timeout [ 49.415081][ T5309] Bluetooth: hci3: command tx timeout [ 49.423130][ T5309] Bluetooth: hci1: command tx timeout [ 49.424857][ T5309] Bluetooth: hci0: command tx timeout [ 49.483750][ T6027] usb 6-1: Using ep0 maxpacket: 8 [ 49.490933][ T6027] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 49.495584][ T6027] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 49.498754][ T6027] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 49.505058][ T6027] usb 6-1: config 1 interface 0 has no altsetting 0 [ 49.511367][ T6027] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.514316][ T6027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.517773][ T6027] usb 6-1: Product: ш [ 49.519058][ T6027] usb 6-1: Manufacturer: ᐄ [ 49.520515][ T6027] usb 6-1: SerialNumber: ᛽꟤꧊궄ஷ䙲ឋ껣庭片悕蠕៤핈㹣䵍ዳᚰ䉈齍㾄癮騽冬䩶ꄈ骂즸㕰쯽¢㘄ˉ櫦ᕐ讵쎀䦡썿亟쫉垸䬏쮈玚ᾩ琀矓䄹쥠ﱑ礆鹦䒬⛥ᗓ㱗 [ 49.529815][ T6068] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 49.532139][ T6068] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 49.741516][ T6027] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 49.750971][ T6027] usb 6-1: USB disconnect, device number 2 [ 49.753134][ T837] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.933891][ T837] usb 5-1: Using ep0 maxpacket: 8 [ 49.939139][ T837] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 49.945853][ T837] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 49.951480][ T837] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 49.955668][ T837] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 49.959557][ T837] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 49.965300][ T837] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 49.968278][ T837] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 49.972370][ T837] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 49.977021][ T837] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 49.981594][ T837] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 49.987340][ T837] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 49.990389][ T837] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 49.995111][ T837] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 49.999683][ T837] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 50.004231][ T837] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 50.011492][ T837] usb 5-1: string descriptor 0 read error: -22 [ 50.013674][ T837] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 50.016961][ T837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.028234][ T837] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 50.224654][ T40] kauditd_printk_skb: 2212 callbacks suppressed [ 50.224667][ T40] audit: type=1400 audit(1752023494.953:2302): avc: denied { create } for pid=6077 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.227450][ T6078] loop2: detected capacity change from 0 to 7 [ 50.232825][ T40] audit: type=1400 audit(1752023494.953:2303): avc: denied { setopt } for pid=6077 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.238118][ T6078] Dev loop2: unable to read RDB block 7 [ 50.240619][ T40] audit: type=1400 audit(1752023494.953:2304): avc: denied { ioctl } for pid=6077 comm="syz.0.13" path="socket:[10388]" dev="sockfs" ino=10388 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.242894][ T6078] loop2: unable to read partition table [ 50.250549][ T40] audit: type=1400 audit(1752023494.953:2305): avc: denied { write } for pid=6077 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.252493][ T6078] loop2: partition table beyond EOD, truncated [ 50.260562][ T6078] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 50.267193][ T40] audit: type=1400 audit(1752023494.993:2306): avc: denied { create } for pid=6077 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 50.273332][ T40] audit: type=1400 audit(1752023494.993:2307): avc: denied { create } for pid=6077 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 50.279514][ T40] audit: type=1400 audit(1752023494.993:2308): avc: denied { setopt } for pid=6077 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 50.285620][ T40] audit: type=1400 audit(1752023494.993:2309): avc: denied { setopt } for pid=6077 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 50.413465][ T6014] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 51.146406][ T40] audit: type=1400 audit(1752023495.873:2310): avc: denied { create } for pid=6085 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.155380][ T40] audit: type=1400 audit(1752023495.873:2311): avc: denied { write } for pid=6085 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.493420][ T5309] Bluetooth: hci1: command tx timeout [ 51.493661][ T5955] Bluetooth: hci0: command tx timeout [ 51.494113][ T5950] Bluetooth: hci3: command tx timeout [ 51.494143][ T5950] Bluetooth: hci2: command tx timeout [ 51.846290][ T1328] usb 8-1: USB disconnect, device number 2 [ 52.065708][ T6100] syz.1.20 uses obsolete (PF_INET,SOCK_PACKET) [ 52.165946][ T6103] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !fIZE,=$)%ĂL [ 52.238483][ T6106] xt_l2tp: invalid flags combination: c [ 52.338715][ T6116] input: syz0 as /devices/virtual/input/input6 [ 52.354338][ T6116] ======================================================= [ 52.354338][ T6116] WARNING: The mand mount option has been deprecated and [ 52.354338][ T6116] and is ignored by this kernel. Remove the mand [ 52.354338][ T6116] option from the mount to silence this warning. [ 52.354338][ T6116] ======================================================= [ 52.379285][ T6116] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 52.455034][ T6121] xt_hashlimit: size too large, truncated to 1048576 [ 52.465596][ T6121] syz.3.24: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 52.472533][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: syz.3.24 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 52.472557][ T6121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.472567][ T6121] Call Trace: [ 52.472574][ T6121] [ 52.472581][ T6121] dump_stack_lvl+0x16c/0x1f0 [ 52.472609][ T6121] warn_alloc+0x248/0x3a0 [ 52.472633][ T6121] ? __pfx_warn_alloc+0x10/0x10 [ 52.472665][ T6121] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 52.472686][ T6121] ? __vmalloc_node_noprof+0xad/0xf0 [ 52.472709][ T6121] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 52.472736][ T6121] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 52.472757][ T6121] ? rcu_is_watching+0x12/0xc0 [ 52.472782][ T6121] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 52.472802][ T6121] ? __alloc_pages_noprof+0xb/0x1b0 [ 52.472822][ T6121] ? ___kmalloc_large_node+0x84/0x1e0 [ 52.472845][ T6121] __kvmalloc_node_noprof+0x30a/0x620 [ 52.472866][ T6121] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 52.472887][ T6121] ? net_generic+0xea/0x2a0 [ 52.472904][ T6121] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 52.472929][ T6121] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 52.472949][ T6121] hashlimit_mt_check_common+0x8bb/0x1460 [ 52.472990][ T6121] hashlimit_mt_check+0x71/0x90 [ 52.473010][ T6121] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 52.473030][ T6121] xt_check_match+0x286/0xa50 [ 52.473049][ T6121] ? __schedule+0xef2/0x5de0 [ 52.473071][ T6121] ? __pfx_xt_check_match+0x10/0x10 [ 52.473093][ T6121] ? xt_find_target+0x1f2/0x290 [ 52.473114][ T6121] ? xt_find_match+0x1f6/0x290 [ 52.473138][ T6121] find_check_entry.constprop.0+0x34e/0xa20 [ 52.473165][ T6121] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 52.473190][ T6121] ? kasan_quarantine_put+0x10a/0x240 [ 52.473210][ T6121] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.473233][ T6121] ? kfree+0x2b4/0x4d0 [ 52.473249][ T6121] ? translate_table+0xc0e/0x17b0 [ 52.473268][ T6121] translate_table+0xd0b/0x17b0 [ 52.473293][ T6121] ? __pfx_translate_table+0x10/0x10 [ 52.473308][ T6121] ? xt_alloc_table_info+0x3e/0xa0 [ 52.473329][ T6121] do_ip6t_set_ctl+0x570/0xb00 [ 52.473346][ T6121] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 52.473366][ T6121] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 52.473385][ T6121] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 52.473437][ T6121] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 52.473456][ T6121] nf_setsockopt+0x8a/0xf0 [ 52.473472][ T6121] ipv6_setsockopt+0x135/0x170 [ 52.473491][ T6121] rawv6_setsockopt+0xc2/0x510 [ 52.473516][ T6121] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 52.473540][ T6121] ? selinux_socket_setsockopt+0x6a/0x80 [ 52.473557][ T6121] ? sock_common_setsockopt+0x2e/0xf0 [ 52.473582][ T6121] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 52.473607][ T6121] do_sock_setsockopt+0x221/0x470 [ 52.473633][ T6121] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 52.473674][ T6121] __sys_setsockopt+0x1a0/0x230 [ 52.473699][ T6121] __x64_sys_setsockopt+0xbd/0x160 [ 52.473720][ T6121] ? do_syscall_64+0x91/0x4c0 [ 52.473742][ T6121] ? lockdep_hardirqs_on+0x7c/0x110 [ 52.473763][ T6121] do_syscall_64+0xcd/0x4c0 [ 52.473788][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.473806][ T6121] RIP: 0033:0x7ff05f38e929 [ 52.473820][ T6121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.473835][ T6121] RSP: 002b:00007ff060132038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 52.473852][ T6121] RAX: ffffffffffffffda RBX: 00007ff05f5b5fa0 RCX: 00007ff05f38e929 [ 52.473863][ T6121] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 52.473874][ T6121] RBP: 00007ff05f410b39 R08: 0000000000000588 R09: 0000000000000000 [ 52.473884][ T6121] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 52.473894][ T6121] R13: 0000000000000000 R14: 00007ff05f5b5fa0 R15: 00007ffddcb99aa8 [ 52.473917][ T6121] [ 52.616260][ C0] vkms_vblank_simulate: vblank timer overrun [ 52.618686][ T6121] Mem-Info: [ 52.619764][ T6121] active_anon:8014 inactive_anon:0 isolated_anon:0 [ 52.619764][ T6121] active_file:1252 inactive_file:40579 isolated_file:0 [ 52.619764][ T6121] unevictable:1768 dirty:119 writeback:0 [ 52.619764][ T6121] slab_reclaimable:11226 slab_unreclaimable:68431 [ 52.619764][ T6121] mapped:24631 shmem:2404 pagetables:1256 [ 52.619764][ T6121] sec_pagetables:304 bounce:0 [ 52.619764][ T6121] kernel_misc_reclaimable:0 [ 52.619764][ T6121] free:466994 free_pcp:22717 free_cma:0 [ 52.633542][ T6121] Node 0 active_anon:32056kB inactive_anon:0kB active_file:5008kB inactive_file:162112kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98524kB dirty:476kB writeback:0kB shmem:6080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12464kB pagetables:4824kB sec_pagetables:1216kB all_unreclaimable? no Balloon:0kB [ 52.636711][ T1328] usb 5-1: USB disconnect, device number 2 [ 52.646021][ T6121] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 52.655619][ T6121] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 52.664465][ T6121] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 52.666263][ T6121] Node 0 DMA32 free:250596kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31808kB inactive_anon:0kB active_file:5008kB inactive_file:162112kB unevictable:3536kB writepending:476kB present:2080628kB managed:1264188kB mlocked:0kB bounce:0kB free_pcp:73092kB local_pcp:11792kB free_cma:0kB [ 52.676542][ T6121] lowmem_reserve[]: 0 0 0 0 0 [ 52.678059][ T6121] Node 1 Normal free:1602020kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:18824kB local_pcp:4896kB free_cma:0kB [ 52.687582][ T6121] lowmem_reserve[]: 0 0 0 0 0 [ 52.689397][ T6121] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 52.695495][ T6121] Node 0 DMA32: 454*4kB (UM) 118*8kB (UME) 121*16kB (UM) 127*32kB (UME) 79*64kB (UME) 53*128kB (UM) 27*256kB (UM) 6*512kB (UM) 5*1024kB (UM) 3*2048kB (ME) 51*4096kB (M) = 250744kB [ 52.701616][ T6121] Node 1 Normal: 5*4kB (UME) 14*8kB (UME) 22*16kB (UME) 24*32kB (UME) 20*64kB (UME) 10*128kB (UME) 1*256kB (U) 7*512kB (UME) 1*1024kB (U) 2*2048kB (UM) 388*4096kB (M) = 1602020kB [ 52.707387][ T6121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 52.710310][ T6121] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 52.713316][ T6121] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 52.716277][ T6121] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 52.719115][ T6121] 44231 total pagecache pages [ 52.720601][ T6121] 0 pages in swap cache [ 52.721887][ T6121] Free swap = 124996kB [ 52.723952][ T6121] Total swap = 124996kB [ 52.725262][ T6121] 1048443 pages RAM [ 52.726471][ T6121] 0 pages HighMem/MovableOnly [ 52.727950][ T6121] 283067 pages reserved [ 52.729257][ T6121] 0 pages cma reserved [ 52.790936][ T5955] Bluetooth: hci3: Malformed LE Event: 0x0b [ 52.820541][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 52.824687][ T6153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28'. [ 52.852035][ T6158] cgroup: none used incorrectly [ 52.896566][ T6164] No buffer was provided with the request [ 52.932046][ T6170] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 52.976238][ T6175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.34'. [ 53.017334][ T6184] bridge1: entered promiscuous mode [ 53.019134][ T6184] bridge1: entered allmulticast mode [ 53.035570][ T6187] process 'syz.0.35' launched './file1' with NULL argv: empty string added [ 53.041873][ T6188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.37'. [ 53.050326][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 53.573825][ T5955] Bluetooth: hci1: command tx timeout [ 53.573964][ T5309] Bluetooth: hci0: command tx timeout [ 53.574550][ T5956] Bluetooth: hci2: command tx timeout [ 53.574573][ T5956] Bluetooth: hci3: command tx timeout [ 54.453118][ T6027] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 54.455181][ T6027] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 56.533358][ T6027] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 56.535429][ T5309] Bluetooth: hci1: command 0x0c1a tx timeout [ 56.535841][ T6027] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 58.613302][ T5309] Bluetooth: hci2: command 0x0c1a tx timeout [ 58.613367][ T6027] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 58.617786][ T6027] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 60.693215][ T5309] Bluetooth: hci3: command 0x0c1a tx timeout [ 60.693424][ T6027] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 60.697733][ T6027] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 60.839212][ T6228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.43'. [ 60.897182][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 60.897198][ T40] audit: type=1400 audit(1752023505.623:2385): avc: denied { create } for pid=6237 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.910987][ T40] audit: type=1400 audit(1752023505.633:2386): avc: denied { bind } for pid=6237 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.936173][ T40] audit: type=1400 audit(1752023505.663:2387): avc: denied { read } for pid=6243 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.945307][ T40] audit: type=1400 audit(1752023505.673:2388): avc: denied { setopt } for pid=6237 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.953307][ T40] audit: type=1400 audit(1752023505.673:2389): avc: denied { accept } for pid=6237 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.953549][ T6239] overlay: ./file0 is not a directory [ 60.959176][ T40] audit: type=1400 audit(1752023505.673:2390): avc: denied { execute } for pid=6237 comm="syz.1.46" name="file0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.959201][ T40] audit: type=1400 audit(1752023505.673:2391): avc: denied { write } for pid=6237 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.973913][ T40] audit: type=1400 audit(1752023505.673:2392): avc: denied { read } for pid=6237 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.988246][ T40] audit: type=1400 audit(1752023505.713:2393): avc: denied { create } for pid=6243 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 60.995849][ T40] audit: type=1400 audit(1752023505.713:2394): avc: denied { ioctl } for pid=6243 comm="syz.0.47" path="socket:[10665]" dev="sockfs" ino=10665 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 61.003031][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.48'. [ 61.028719][ T6260] overlayfs: missing 'lowerdir' [ 61.089711][ T6269] program syz.1.51 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.283072][ T5742] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 61.292337][ T6273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.52'. [ 61.328698][ T6275] sp0: Synchronizing with TNC [ 61.443115][ T5742] usb 8-1: Using ep0 maxpacket: 8 [ 61.448448][ T5742] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 61.451952][ T5742] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.455182][ T5742] usb 8-1: Product: syz [ 61.456681][ T5742] usb 8-1: Manufacturer: syz [ 61.458132][ T5742] usb 8-1: SerialNumber: syz [ 61.460862][ T5742] usb 8-1: config 0 descriptor?? [ 61.600895][ T6283] (unnamed net_device) (uninitialized): (slave veth1_macvtap): Device is not bonding slave [ 61.605123][ T6283] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1_macvtap) [ 61.654161][ T6287] netlink: 'syz.1.57': attribute type 4 has an invalid length. [ 61.666779][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'. [ 61.673208][ T5742] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 61.676890][ T5742] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 61.680835][ T5742] usb 8-1: USB disconnect, device number 3 [ 61.729712][ T6294] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.59'. [ 61.856287][ T6301] netlink: 104 bytes leftover after parsing attributes in process `syz.1.61'. [ 61.938108][ T6304] 9pnet_fd: p9_fd_create_unix (6304): problem connecting socket: qY3aK: -91 [ 61.942667][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 61.949189][ T6304] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.952042][ T6304] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.954970][ T6304] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.957779][ T6304] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.962021][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 61.966461][ T6304] Zero length message leads to an empty skb [ 62.043551][ T6309] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 62.115225][ T6318] bridge1: entered promiscuous mode [ 62.117288][ T6318] bridge1: entered allmulticast mode [ 62.503111][ T6027] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.653095][ T6027] usb 5-1: Using ep0 maxpacket: 32 [ 62.662149][ T6027] usb 5-1: config 1 interface 0 altsetting 115 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 62.668649][ T6027] usb 5-1: config 1 interface 0 has no altsetting 0 [ 62.676927][ T6027] usb 5-1: New USB device found, idVendor=056a, idProduct=00c2, bcdDevice= 0.40 [ 62.680718][ T6027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.684287][ T6027] usb 5-1: Product: 쵏ᝰ鼗褽訐齶ꭴ뾭꿆辅岛牦呧阂뎁㬁㘜究庣줕ἓ೉賀롈땯軌⒒龏⋂渰㿔䯋粎筵걚ﭦྋꃔ㸩唘艓䪟헪䌗薸㙾施硳ಊ︝뷇㎇㾼魋ꄃౣ湣淡祐ć潉뫎⋥謭亞玽䋂⯐ᕲ蛲⿣ [ 62.696371][ T6027] usb 5-1: Manufacturer: ㈊ﵻ련̰᭗벱視澁䊋᭍Ά㬿⮳桭뢪삘ꕲ瓐ൠ왡硒㦫铙羄쁍鿡ᾶ瀮ⵉ〾먩靲֑딀꭭㈨젍訪킡퟾潵쏙ꀆ脥絢㌮ᓇ脥➂鉟蕬靶㼕醅윔箒Ɡ⬔멁촾ý壎歜ꏠୄ獾嗠䄋鱶鵐⨤텯讗뜇풡ꀇ쪨燽숔緻⸗嬳䷝ᠹꪥ᭝꺭蛰㑍⹝⁑룆蝯善㦣ᣇ먟끩탽辷돳 [ 62.709231][ T6027] usb 5-1: SerialNumber: П [ 63.021024][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.79'. [ 63.030556][ T6352] ipip0: entered promiscuous mode [ 63.320537][ T6331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.324076][ T6331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.334608][ T6027] usbhid 5-1:1.0: can't add hid device: -71 [ 63.336522][ T6027] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 63.340521][ T6027] usb 5-1: USB disconnect, device number 3 [ 63.935829][ T6367] netlink: 56 bytes leftover after parsing attributes in process `syz.3.84'. [ 64.024570][ T6370] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 64.117114][ T6381] usb usb8: usbfs: process 6381 (syz.1.89) did not claim interface 0 before use [ 64.177950][ T6386] overlayfs: missing 'lowerdir' [ 64.726272][ T5955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.729766][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.732567][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.736389][ T5955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.739111][ T5955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.749705][ T5309] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.752201][ T5309] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.755065][ T5309] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.758380][ T5309] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.761127][ T5309] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.791927][ T6409] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 64.795503][ T6409] capability: warning: `syz.0.95' uses deprecated v2 capabilities in a way that may be insecure [ 64.801261][ T6409] fuse: Bad value for 'group_id' [ 64.803644][ T6409] fuse: Bad value for 'group_id' [ 64.871303][ T6406] chnl_net:caif_netlink_parms(): no params data found [ 64.927155][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.987033][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.010455][ T6406] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.012911][ T6406] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.023135][ T6406] bridge_slave_0: entered allmulticast mode [ 65.025959][ T6406] bridge_slave_0: entered promiscuous mode [ 65.042281][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.051885][ T6406] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.054356][ T6406] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.056776][ T6406] bridge_slave_1: entered allmulticast mode [ 65.059509][ T6406] bridge_slave_1: entered promiscuous mode [ 65.111075][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.125717][ T6406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.138040][ T6406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.176531][ T6406] team0: Port device team_slave_0 added [ 65.177485][ T6437] kvm: pic: single mode not supported [ 65.179201][ T6437] kvm: pic: level sensitive irq not supported [ 65.181402][ T6437] kvm: pic: non byte read [ 65.197021][ T6406] team0: Port device team_slave_1 added [ 65.230442][ T6406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.233293][ T6406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.243568][ T6406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.248499][ T6406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.251151][ T6406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.261071][ T6406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.341945][ T6406] hsr_slave_0: entered promiscuous mode [ 65.345884][ T6406] hsr_slave_1: entered promiscuous mode [ 65.348125][ T6406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.350459][ T6406] Cannot create hsr debugfs directory [ 65.372357][ T61] bridge_slave_1: left allmulticast mode [ 65.374757][ T61] bridge_slave_1: left promiscuous mode [ 65.377620][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.383258][ T61] bridge_slave_0: left allmulticast mode [ 65.385476][ T61] bridge_slave_0: left promiscuous mode [ 65.387777][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.470670][ T6459] capability: warning: `syz.3.109' uses 32-bit capabilities (legacy support in use) [ 65.619482][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.624171][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.627984][ T61] bond0 (unregistering): Released all slaves [ 65.704626][ T6465] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 65.707042][ T6465] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 65.717542][ T6465] vhci_hcd vhci_hcd.0: Device attached [ 65.720973][ T6476] usbip_core: unknown command [ 65.722500][ T6476] vhci_hcd: unknown pdu 0 [ 65.724301][ T6476] usbip_core: unknown command [ 65.727303][ T13] vhci_hcd: stop threads [ 65.730978][ T13] vhci_hcd: release socket [ 65.732633][ T13] vhci_hcd: disconnect device [ 65.778830][ T6479] overlay: Unknown parameter 'fsmagic' [ 65.831713][ T6486] gretap0: entered promiscuous mode [ 65.835932][ T6486] gretap0: left promiscuous mode [ 65.936855][ T6406] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.941858][ T6406] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.949504][ T40] kauditd_printk_skb: 74 callbacks suppressed [ 65.949514][ T40] audit: type=1400 audit(1752023510.673:2469): avc: denied { shutdown } for pid=6497 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.965290][ T6406] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.979643][ T6406] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.004845][ T61] hsr_slave_0: left promiscuous mode [ 66.007037][ T61] hsr_slave_1: left promiscuous mode [ 66.009209][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.011537][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.017265][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.019614][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.038063][ T61] veth1_macvtap: left promiscuous mode [ 66.039952][ T61] veth0_macvtap: left promiscuous mode [ 66.041775][ T61] veth1_vlan: left promiscuous mode [ 66.044175][ T61] veth0_vlan: left promiscuous mode [ 66.361629][ T40] audit: type=1400 audit(1752023511.083:2470): avc: denied { ioctl } for pid=6504 comm="syz.3.119" path="socket:[9136]" dev="sockfs" ino=9136 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.437911][ T40] audit: type=1326 audit(1752023511.163:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6507 comm="syz.1.120" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f562718e929 code=0x0 [ 66.555398][ T61] team0 (unregistering): Port device team_slave_1 removed [ 66.614030][ T61] team0 (unregistering): Port device team_slave_0 removed [ 66.774170][ T5955] Bluetooth: hci1: command tx timeout [ 66.966342][ T6500] __nla_validate_parse: 6 callbacks suppressed [ 66.966359][ T6500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.118'. [ 67.019555][ T6406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.027861][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.122'. [ 67.042766][ T6406] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.043866][ T40] audit: type=1400 audit(1752023511.763:2472): avc: denied { add_name } for pid=6519 comm="syz.3.122" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.053782][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.054478][ T40] audit: type=1400 audit(1752023511.763:2473): avc: denied { create } for pid=6519 comm="syz.3.122" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.056070][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.062678][ T40] audit: type=1400 audit(1752023511.763:2474): avc: denied { associate } for pid=6519 comm="syz.3.122" name="cpuacct.usage_sys" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 67.066621][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.072094][ T40] audit: type=1400 audit(1752023511.773:2475): avc: denied { append } for pid=6519 comm="syz.3.122" path="/39/file0/cpuacct.usage_sys" dev="9p" ino=35913961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.074293][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.082409][ T40] audit: type=1400 audit(1752023511.773:2476): avc: denied { lock } for pid=6519 comm="syz.3.122" path="/39/file0/cpuacct.usage_sys" dev="9p" ino=35913961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.154325][ T40] audit: type=1400 audit(1752023511.883:2477): avc: denied { read } for pid=6517 comm=2321202E2F66696C65300A name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 67.155086][ T6524] sd 0:0:0:0: PR command failed: 1026 [ 67.163893][ T6524] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 67.165173][ T40] audit: type=1400 audit(1752023511.883:2478): avc: denied { open } for pid=6517 comm=2321202E2F66696C65300A path="/36/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 67.166637][ T6524] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 67.227708][ T6406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.389132][ T6406] veth0_vlan: entered promiscuous mode [ 67.395832][ T6406] veth1_vlan: entered promiscuous mode [ 67.417996][ T6406] veth0_macvtap: entered promiscuous mode [ 67.427319][ T6406] veth1_macvtap: entered promiscuous mode [ 67.456448][ T6406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.463894][ T6406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.468476][ T6406] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.471269][ T6406] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.474056][ T6406] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.476743][ T6406] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.510827][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.516782][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.541492][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.547200][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.572717][ T6561] macvlan2: entered promiscuous mode [ 67.577855][ T6561] macvlan2: entered allmulticast mode [ 67.579804][ T6561] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 67.632333][ T6565] hpfs: hpfs_map_sector(): read error [ 67.637254][ T6565] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.762408][ T6563] kvm: pic: single mode not supported [ 67.971861][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'. [ 67.979769][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.132'. [ 67.982731][ T6592] wireguard0: entered promiscuous mode [ 67.984790][ T6592] wireguard0: entered allmulticast mode [ 68.285095][ T6625] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 68.355037][ T6633] loop6: detected capacity change from 0 to 524287999 [ 68.443063][ T10] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 68.594777][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.598882][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 68.606792][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 68.610516][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 68.617297][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 68.620781][ T10] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 68.624139][ T10] usb 8-1: Manufacturer: syz [ 68.632273][ T10] usb 8-1: config 0 descriptor?? [ 68.637343][ T6659] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 68.639414][ T6659] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.644110][ T6659] vhci_hcd vhci_hcd.0: Device attached [ 68.824179][ T6674] Bluetooth: MGMT ver 1.23 [ 68.864508][ T5955] Bluetooth: hci1: command tx timeout [ 68.883266][ T1328] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 68.896870][ T10] rc_core: IR keymap rc-hauppauge not found [ 68.899672][ T10] Registered IR keymap rc-empty [ 68.902302][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 68.923224][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 68.956946][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 68.962696][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input7 [ 68.975510][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 68.993068][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 69.016253][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 69.033638][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 69.053078][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 69.073245][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 69.093092][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 69.113148][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 69.133170][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 69.153090][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 69.174133][ T10] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 69.177311][ T10] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 69.182517][ T10] usb 8-1: USB disconnect, device number 4 [ 69.725237][ T6696] netlink: 'syz.3.150': attribute type 10 has an invalid length. [ 69.731280][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.736344][ T6696] bridge_slave_1: left allmulticast mode [ 69.738618][ T6696] bridge_slave_1: left promiscuous mode [ 69.741592][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.750767][ T6696] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 69.783383][ C2] Illegal XDP return value 16128 on prog (id 23) dev bridge_slave_1, expect packet loss! [ 69.932623][ T6705] bridge1: entered promiscuous mode [ 70.505839][ T6736] 9pnet_virtio: no channels available for device 127.0.0.1 [ 70.933151][ T5955] Bluetooth: hci1: command tx timeout [ 71.098590][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.100669][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.276654][ T6770] netlink: 88 bytes leftover after parsing attributes in process `syz.3.172'. [ 71.279932][ T6770] tipc: Started in network mode [ 71.281538][ T6770] tipc: Node identity 1000000000000000ffffffffffffffff, cluster identity 4711 [ 71.300415][ T6772] hfsplus: unable to find HFS+ superblock [ 71.583382][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 71.590329][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803c575400: rx timeout, send abort [ 71.594179][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 71.594192][ T40] audit: type=1400 audit(1752023516.323:2520): avc: denied { read } for pid=5340 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 71.605588][ T40] audit: type=1400 audit(1752023516.323:2521): avc: denied { search } for pid=5340 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.612196][ T40] audit: type=1400 audit(1752023516.323:2522): avc: denied { search } for pid=5340 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.618911][ T40] audit: type=1400 audit(1752023516.323:2523): avc: denied { add_name } for pid=5340 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.625059][ T40] audit: type=1400 audit(1752023516.323:2524): avc: denied { create } for pid=5340 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.631228][ T40] audit: type=1400 audit(1752023516.323:2525): avc: denied { append open } for pid=5340 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.638686][ T40] audit: type=1400 audit(1752023516.323:2526): avc: denied { getattr } for pid=5340 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.683721][ T6666] vhci_hcd: connection reset by peer [ 71.686650][ T46] vhci_hcd: stop threads [ 71.688397][ T46] vhci_hcd: release socket [ 71.691427][ T46] vhci_hcd: disconnect device [ 71.744529][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 71.748635][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 71.752095][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 71.755891][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 71.759299][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.763318][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 71.767279][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 71.772578][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 71.776362][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.784232][ T10] usb 6-1: config 0 descriptor?? [ 71.811278][ T40] audit: type=1400 audit(1752023516.533:2527): avc: denied { execute_no_trans } for pid=6782 comm="syz.4.176" path="/17/file2" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.819811][ T40] audit: type=1400 audit(1752023516.533:2528): avc: denied { unmount } for pid=5959 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 71.826619][ T40] audit: type=1400 audit(1752023516.533:2529): avc: denied { mounton } for pid=6782 comm="syz.4.176" path="/17/file0" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 71.855652][ T6785] netlink: 196 bytes leftover after parsing attributes in process `syz.3.177'. [ 71.857920][ T6788] loop6: detected capacity change from 0 to 524287999 [ 71.860044][ T6785] netlink: 196 bytes leftover after parsing attributes in process `syz.3.177'. [ 71.861856][ T6788] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.865838][ T6785] netlink: 19 bytes leftover after parsing attributes in process `syz.3.177'. [ 71.867578][ T6788] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.873666][ T6788] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.876960][ T6788] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.880323][ T6788] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.884123][ T6788] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.887992][ T6788] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.891331][ T6788] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.895283][ T6788] ldm_validate_partition_table(): Disk read failed. [ 71.897961][ T6788] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.901162][ T6788] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.905301][ T6788] Dev loop6: unable to read RDB block 0 [ 71.907901][ T6788] loop6: unable to read partition table [ 71.912076][ T6788] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 71.963619][ T5742] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 71.995043][ T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 72.013851][ T10] usb 6-1: USB disconnect, device number 3 [ 72.025586][ T10] usblp0: removed [ 72.064493][ T6798] block nbd3: NBD_DISCONNECT [ 72.066367][ T6798] block nbd3: Disconnected due to user request. [ 72.068400][ T6798] block nbd3: shutting down sockets [ 72.093629][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803c575400: abort rx timeout. Force session deactivation [ 72.113045][ T5742] usb 5-1: Using ep0 maxpacket: 32 [ 72.119430][ T5742] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 72.122102][ T5742] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 72.125245][ T5742] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 72.128021][ T5742] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.130970][ T5742] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 72.134285][ T5742] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 72.138303][ T5742] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 72.141126][ T5742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.146054][ T5742] usb 5-1: config 0 descriptor?? [ 72.354402][ T5742] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 72.362903][ T5742] usb 5-1: USB disconnect, device number 4 [ 72.366457][ T5742] usblp0: removed [ 72.433087][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 72.532873][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.192'. [ 72.536319][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.192'. [ 72.604809][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 72.607702][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 72.610391][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 72.613574][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 72.616467][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.619422][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 72.622472][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 72.628107][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 72.631353][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.632408][ T6845] binder: BINDER_SET_CONTEXT_MGR already set [ 72.635417][ T10] usb 6-1: config 0 descriptor?? [ 72.640202][ T6845] binder: 6837:6845 ioctl 4018620d 200000000100 returned -16 [ 72.672164][ T6845] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 72.783064][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 72.842551][ T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 72.943164][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 72.946874][ T34] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 72.949518][ T34] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 72.952192][ T34] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 72.956102][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.959227][ T34] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 72.962190][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 72.967346][ T34] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 72.970917][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.976267][ T34] usb 5-1: config 0 descriptor?? [ 73.017430][ T5955] Bluetooth: hci1: command tx timeout [ 73.113173][ T6858] kvm_intel: kvm [6857]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x203 [ 73.181864][ T34] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 73.387456][ T6781] netlink: 28 bytes leftover after parsing attributes in process `syz.0.175'. [ 73.393222][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'. [ 73.398910][ T5759] usb 5-1: USB disconnect, device number 5 [ 73.405860][ T5759] usblp1: removed [ 73.502414][ T6868] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 73.553636][ T6871] netlink: 'syz.4.203': attribute type 1 has an invalid length. [ 73.556442][ T6871] netlink: 'syz.4.203': attribute type 2 has an invalid length. [ 73.558939][ T6871] netlink: 'syz.4.203': attribute type 2 has an invalid length. [ 73.561347][ T6871] netlink: 'syz.4.203': attribute type 1 has an invalid length. [ 73.743129][ T34] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 73.803170][ T6027] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 73.873158][ T34] usb 8-1: device descriptor read/64, error -71 [ 73.942096][ T6877] netlink: 'syz.0.204': attribute type 1 has an invalid length. [ 73.953104][ T6027] usb 9-1: Using ep0 maxpacket: 16 [ 73.954616][ T6877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.956968][ T6027] usb 9-1: config 0 has an invalid interface number: 145 but max is 0 [ 73.960905][ T6027] usb 9-1: config 0 has no interface number 0 [ 73.967023][ T6027] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 73.971014][ T6027] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.973124][ T1328] vhci_hcd: vhci_device speed not set [ 73.974795][ T6027] usb 9-1: Product: syz [ 73.978392][ T6027] usb 9-1: Manufacturer: syz [ 73.979308][ T6878] veth3: entered promiscuous mode [ 73.980355][ T6027] usb 9-1: SerialNumber: syz [ 73.984282][ T6878] bond1: (slave veth3): Enslaving as an active interface with a down link [ 73.989058][ T6027] usb 9-1: config 0 descriptor?? [ 73.992444][ T6027] hub 9-1:0.145: bad descriptor, ignoring hub [ 73.994463][ T6027] hub 9-1:0.145: probe with driver hub failed with error -5 [ 74.001802][ T6027] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.145/input/input9 [ 74.013518][ T6877] veth5: entered promiscuous mode [ 74.017115][ T6877] bond1: (slave veth5): Enslaving as an active interface with a down link [ 74.033171][ T6878] vlan2: entered allmulticast mode [ 74.034802][ T6878] bond1: entered allmulticast mode [ 74.037780][ T6878] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 74.044358][ T6877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6877 comm=syz.0.204 [ 74.062134][ T6881] vlan2: entered allmulticast mode [ 74.065989][ T6881] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 74.133289][ T34] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 74.264900][ T34] usb 8-1: device descriptor read/64, error -71 [ 74.373213][ T34] usb usb8-port1: attempt power cycle [ 74.384059][ T10] usb 9-1: USB disconnect, device number 2 [ 74.713552][ T34] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 74.733573][ T34] usb 8-1: device descriptor read/8, error -71 [ 74.926291][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.209'. [ 74.973628][ T34] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 74.996737][ T34] usb 8-1: device descriptor read/8, error -71 [ 75.103439][ T34] usb usb8-port1: unable to enumerate USB device [ 75.131665][ T6917] syz.4.213: attempt to access beyond end of device [ 75.131665][ T6917] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 75.135966][ T6917] (syz.4.213,6917,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 75.138362][ T6917] (syz.4.213,6917,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 75.140637][ T6917] (syz.4.213,6917,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 75.143876][ T6917] (syz.4.213,6917,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 75.175261][ T6924] netlink: 'syz.0.214': attribute type 1 has an invalid length. [ 75.190988][ T6924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.200610][ T6924] bond2: (slave gretap1): making interface the new active one [ 75.206089][ T6924] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 75.267323][ T6935] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.271328][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.217'. [ 75.277128][ T6924] bond2 (unregistering): (slave gretap1): Releasing active interface [ 75.281723][ T6924] bond2 (unregistering): Released all slaves [ 75.327414][ T6938] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 75.330387][ T6938] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 75.333972][ T6938] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 75.344611][ T6938] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 75.346990][ T6938] overlayfs: failed to set xattr on upper [ 75.348875][ T6938] overlayfs: ...falling back to redirect_dir=nofollow. [ 75.351051][ T6938] overlayfs: ...falling back to index=off. [ 75.352884][ T6938] overlayfs: ...falling back to uuid=null. [ 75.390396][ T6942] netlink: 32 bytes leftover after parsing attributes in process `syz.4.219'. [ 75.393264][ T6942] openvswitch: netlink: Flow key attr not present in new flow. [ 75.451847][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.219'. [ 75.506524][ T6942] erofs (device loop4): cannot find valid erofs superblock [ 75.531057][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 75.533256][ T6952] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 75.534274][ T6950] bridge_slave_1: left allmulticast mode [ 75.537665][ T6952] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 75.543088][ T6950] bridge_slave_1: left promiscuous mode [ 75.544095][ T6952] CPU: 0 UID: 0 PID: 6952 Comm: syz.4.221 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 75.545978][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 75.549498][ T6952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.549508][ T6952] RIP: 0010:h5_recv+0x104/0x910 [ 75.556734][ T6952] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 71 78 4d f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 75.562638][ T6952] RSP: 0018:ffffc90003d87c00 EFLAGS: 00010293 [ 75.564656][ T6952] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff886e7dfa [ 75.567505][ T6952] RDX: ffff88806295a440 RSI: ffffffff886e7e3f RDI: 0000000000000005 [ 75.569955][ T6952] RBP: ffffc90003d87d88 R08: 0000000000000005 R09: 0000000000000000 [ 75.572419][ T6952] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 75.574886][ T6952] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb368c0 [ 75.577346][ T6952] FS: 00007f6cdee786c0(0000) GS:ffff8880d6716000(0000) knlGS:0000000000000000 [ 75.580126][ T6952] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.582171][ T6952] CR2: 00007f6cdee78d58 CR3: 00000000583ba000 CR4: 0000000000352ef0 [ 75.584773][ T6952] Call Trace: [ 75.586187][ T6952] [ 75.587137][ T6952] ? __pfx_h5_recv+0x10/0x10 [ 75.588594][ T6952] hci_uart_tty_receive+0x254/0x7e0 [ 75.590218][ T6952] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 75.591994][ T6952] tty_ioctl+0x583/0x1640 [ 75.593352][ T6952] ? __pfx_tty_ioctl+0x10/0x10 [ 75.594826][ T6952] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 75.596937][ T6952] ? hook_file_ioctl_common+0x145/0x410 [ 75.598646][ T6952] ? selinux_file_ioctl+0x180/0x270 [ 75.600265][ T6952] ? selinux_file_ioctl+0xb4/0x270 [ 75.601855][ T6952] ? __pfx_tty_ioctl+0x10/0x10 [ 75.603351][ T6952] __x64_sys_ioctl+0x18e/0x210 [ 75.604871][ T6952] do_syscall_64+0xcd/0x4c0 [ 75.606315][ T6952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.608149][ T6952] RIP: 0033:0x7f6cddf8e929 [ 75.609535][ T6952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.615400][ T6952] RSP: 002b:00007f6cdee78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.617920][ T6952] RAX: ffffffffffffffda RBX: 00007f6cde1b6160 RCX: 00007f6cddf8e929 [ 75.620355][ T6952] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000005 [ 75.622747][ T6952] RBP: 00007f6cde010b39 R08: 0000000000000000 R09: 0000000000000000 [ 75.625349][ T6952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.627786][ T6952] R13: 0000000000000000 R14: 00007f6cde1b6160 R15: 00007ffd6aace348 [ 75.630195][ T6952] [ 75.631169][ T6952] Modules linked in: [ 75.632924][ T6952] ---[ end trace 0000000000000000 ]--- [ 75.634944][ T6952] RIP: 0010:h5_recv+0x104/0x910 [ 75.636589][ T6952] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 71 78 4d f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 75.643807][ T6950] bridge_slave_0: left allmulticast mode [ 75.645650][ T6950] bridge_slave_0: left promiscuous mode [ 75.647445][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.653025][ T6952] RSP: 0018:ffffc90003d87c00 EFLAGS: 00010293 [ 75.654975][ T6952] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff886e7dfa [ 75.658460][ T6952] RDX: ffff88806295a440 RSI: ffffffff886e7e3f RDI: 0000000000000005 [ 75.660987][ T6952] RBP: ffffc90003d87d88 R08: 0000000000000005 R09: 0000000000000000 [ 75.664815][ T6952] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 75.667589][ T6952] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb368c0 [ 75.670042][ T6952] FS: 00007f6cdee786c0(0000) GS:ffff8880d6716000(0000) knlGS:0000000000000000 [ 75.672774][ T6952] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.675050][ T6952] CR2: 00005654f95ddb08 CR3: 00000000583ba000 CR4: 0000000000352ef0 [ 75.677549][ T6952] Kernel panic - not syncing: Fatal exception [ 75.679998][ T6952] Kernel Offset: disabled [ 75.681352][ T6952] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:12:00 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000046 RCX=ffffffff819b9452 RDX=ffff88806295a440 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc90003d87910 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=6567203a73706f4f R12=1ffff920007b0f25 R13=0000000000000000 R14=ffff88802956a440 R15=ffffc90003d879e0 RIP=ffffffff81bbf198 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6cdee786c0 ffffffff 00c00000 GS =0000 ffff8880d6716000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6cdee78d58 CR3=00000000583ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000014 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cde011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cde011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cde011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cde011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cde011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cde011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cde185488 00007f6cde185480 00007f6cde185478 00007f6cde185450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cdeced100 00007f6cde185440 00007f6cde185458 00007f6cde1854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cde185498 00007f6cde185490 00007f6cde185488 00007f6cde185480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffffffdfc000 RBX=0000000000000000 RCX=0000000000000016 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff93d64834 RBP=ffff888029af3700 RSP=ffffc900006a0f38 R8 =0000000000000001 R9 =fffff520000d41d5 R10=0000000000000003 R11=ffffc900006a0ff8 R12=0000000000204000 R13=0000000000000016 R14=ffff888029af36c0 R15=dffffc0000000000 RIP=ffffffff8168f54e RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f6cdeeba6c0 ffffffff 00c01300 GS =0000 ffff8880d6816000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6cdeeb9f98 CR3=00000000583ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd445e3010 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcef8a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcef8a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcef8a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcef8a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcef8a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcef8a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000066834 RBX=0000000000000002 RCX=ffffffff8b882c79 RDX=ffffed100d4c6646 RSI=ffffffff8c158ee0 RDI=ffffffff819211e1 RBP=ffffed1003bd1910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000000 R12=0000000000000002 R13=ffff88801de8c880 R14=ffffffff90a97f50 R15=0000000000000000 RIP=ffffffff8b8817df RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6916000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6cdee77f98 CR3=000000004f5d7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6aace6d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cde011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cde011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cde011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cde011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cde011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6cde011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000007937c RBX=0000000000000003 RCX=ffffffff8b882c79 RDX=ffffed100d4e6646 RSI=ffffffff8c158ee0 RDI=ffffffff819211e1 RBP=ffffed1003c5c000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000000 R12=0000000000000003 R13=ffff88801e2e0000 R14=ffffffff90a97f50 R15=0000000000000000 RIP=ffffffff8b8817df RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a16000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6cdee98f98 CR3=0000000023e85000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=0000000000000000 Opmask02=000000007ffeffff Opmask03=0000000000800000 Opmask04=00000000ffffdfff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005632d8a2cf40 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005632d8a376f0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c5d9f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737344421f73 431e161e035c1810 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05807810636dfd15 00005637bb8c6048 0000000000000051 0000000000000034 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000641 4d554e0036353900 37316c6c696b6672 2f01dc4c82c4a025 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000